Cloud Security Engineer (m/f/d) for Timisoara/ Munich

YOUR TASKS:

- Oversee and enhance security measures for our cloud-based infrastructure and microservices applications, ensuring robust protection and compliance.

- Develop and implement security best practices for cloud deployments, automation, monitoring, and incident response to mitigate risks and maintain a secure environment.

- Proactively monitor and address cloud security incidents, conducting root cause analysis, and driving remediation to minimize impact.

- Work closely with cross-functional teams to identify vulnerabilities, develop security controls, and implement effective solutions.

- Participate in security audits, assessments, and penetration tests to maintain compliance with ISO 27001, SOC 2, and other relevant standards.

- Conduct risk and vulnerability assessments, identifying gaps and implementing mitigating controls.

- Create and maintain comprehensive security policies and procedures for cloud-native applications, including container, API, and microservices security.

- Leverage Infrastructure as Code (IaC) tools (e.g., Terraform, ARM templates) to automate security controls, compliance checks, and integrate with Azure DevOps pipelines.

- Keep up-to-date with the latest security trends, threats, tools, and best practices, particularly in cloud-native and container security domains.

YOUR CAPABILITIES:

Required Qualifications:

- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

- At least 3 years of experience securing cloud infrastructure, with a strong focus on microservices environments.

- Solid understanding of standards like ISO 27001, SOC 2, NIST, CIS, GDPR, and best practices for cloud security.

- Proven experience with cloud security tools and WAF solutions, such as Azure Cloud Defender, Cloudflare, or Akamai.

- Skilled in monitoring, incident response, and threat detection within cloud environments.

- Strong grasp of network security, including firewalls, IDS/IPS, VPNs, and cloud-native security services.

- Strong analytical and problem-solving skills, with the ability to work independently or as part of a collaborative team.

- Excellent communication skills to engage with both technical and non-technical stakeholders.

Preferred Qualifications:

- Background in securing SaaS platforms, with knowledge of cloud-native architectures and microservices patterns.

- Experience integrating security into CI/CD pipelines using Azure DevOps and familiarity with DevSecOps practices.

- Expertise in securing containerized environments, with a strong understanding of runtime security, container isolation, vulnerability scanning, and best practices for hardening containers.

- Expertise in Infrastructure as Code (IaC) tools (e.g., Terraform, ARM templates) and automation scripting (Python, Bash, PowerShell).

- Understanding of Zero Trust security principles and their application in cloud environments.

- Experience with security logging, monitoring, and incident management tools.

We offer:

• Onboarding: HR Induction, Newbies-Day, Training for our internal products & Buddy-Program
• Benefits: meal vouchers, performance bonus, recommendation bonus, voluntary company bonus, free parking at our VOX Technology Park location in Timisoara, Bookster for bookworms, gaming rooms & rooftop access in Timisoara
• Company culture: flexibility through HYBRID working style (50% work from home), 23 vacations days from start, Diversity & Inclusion Team – culture talks, company event (Halloween/Christmas/ Summer party, team buildings), Barista corner in Timisoara, fresh fruit & sweets day after every release cycle, relocation package for those who wish to move to Timisoara/Sibiu
• Career and development: career model with Expert- & Leadership Track, LinkedIn Learning, German language course if department requires, Java and Scrum certifications
• Health Initiatives: medical subscription with a national-wide medical provider, 7Card for fitness activities, Timotion & Spartan sponsors
• Security and Stability: Stock exchange presence in the German SDax & TecDax, over 30% EBIT-Marge, Scale-up, 18 years with record sales and earnings, visibility, future product
• 2 locations in Romania: TIMISOARA – VOX Technology Park | Calea Torontalului nr 69 | building B and SIBIU Str. Nicolaus Olahus | No.5 | Business Center Sibiu | Building B | Ground Floor
• Standard contract: CIM

ATOSS Software SE | recrutare@atoss.com